This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
File: mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json)
Hash identifier: f3qI+SYIl3mnhkOhmZIsAEWExzvhHFTP4jFLbVXd51A=
Subject key identifier: EA:38:98:1F:9A:6F:F5:30:B6:4D:D2:D7:46:D3:39:7B:57:B6:A4:8E
Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48
Certificate issuer: /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
Manifest number: 7F
Signing time: Sat 27 Dec 2025 05:33:09 +0000
Manifest this update: Sat 27 Dec 2025 05:33:08 +0000
Manifest next update: Sat 03 Jan 2026 05:33:08 +0000
Files and hashes: 1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: l8TDOI/++42PnT71fUcy7uQqfZJWdu12NCPBOu27p24=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl
rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 05:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
Validity
Not Before: Dec 27 05:33:08 2025 GMT
Not After : Jan 3 05:33:08 2026 GMT
Subject: CN=694f6f94-e004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:cb:0d:fd:7f:dd:93:df:fa:b6:d1:cf:29:
09:f5:7c:86:1a:c2:0d:6e:26:8d:05:e6:8a:d9:df:
e9:5c:e6:4b:18:09:53:2f:ed:c8:25:2e:36:c6:7d:
7d:9a:07:81:bc:ed:e3:95:be:dd:81:06:8a:f7:21:
bc:d0:28:be:32:d7:eb:1e:e0:36:e0:0b:e7:ee:6c:
44:21:a6:ac:af:fb:78:1a:e3:a6:e1:0b:2e:9b:ac:
d5:35:d0:9f:ec:69:e3:7c:36:a8:2e:30:c1:f7:7b:
56:b9:da:4d:06:8e:a4:52:ff:9c:d1:44:17:49:71:
40:b8:9c:15:ce:47:cb:85:b0:61:ec:91:ba:3f:28:
98:80:4e:dc:fa:55:15:46:65:09:02:2c:2a:18:f2:
65:c2:b0:70:f5:ae:e8:5c:4c:97:fb:36:3a:46:df:
c4:88:ae:2a:50:fa:56:a7:e5:d7:ae:6a:52:af:57:
5d:10:1a:d0:b8:82:3f:45:1f:66:9e:a1:5f:4a:bd:
d9:6c:e5:1b:1e:12:ad:1b:cb:dd:58:2f:81:19:56:
7d:82:94:be:4a:29:fe:5a:da:be:2e:e0:de:f6:e2:
2e:fc:78:c9:a2:10:a6:ce:33:b8:60:11:f0:e9:b6:
22:2f:c0:62:70:88:19:0c:70:38:5b:cf:73:6f:d8:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:38:98:1F:9A:6F:F5:30:B6:4D:D2:D7:46:D3:39:7B:57:B6:A4:8E
X509v3 Authority Key Identifier:
keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e1:bb:2a:7a:ae:d4:21:82:73:d8:9e:bd:d8:6f:e3:09:d2:
a3:73:12:a6:93:5d:1d:77:e5:a4:af:d2:46:77:21:c4:10:ad:
db:35:69:db:e5:24:1b:30:fa:a8:80:3c:eb:3f:ef:67:c5:09:
d2:3e:a9:55:97:e3:87:1e:ce:f8:ff:16:e8:59:97:b9:0c:5a:
17:aa:e1:2e:d3:7e:d7:15:53:9c:5b:f7:37:48:67:95:0f:9b:
65:de:4c:61:38:2e:2e:9e:93:9d:52:5c:3f:c3:2d:00:b1:df:
32:fa:17:8e:e8:d6:35:88:e4:04:8a:95:66:3a:b5:4e:cb:21:
58:35:27:1a:08:26:40:a1:5b:32:6f:8b:60:68:06:df:88:50:
09:33:90:4f:b9:ee:df:af:9b:2c:7b:f2:ce:34:19:a0:66:80:
9a:6f:25:fa:de:29:7f:4b:96:46:9b:12:de:d3:60:28:4c:6b:
4c:b5:79:be:7b:83:f2:e2:cf:f7:05:fd:85:ee:b1:a0:bb:5b:
ea:cb:74:dd:e9:c3:c3:a9:2d:3d:c9:89:b2:e1:43:ad:65:31:
89:cb:a6:2d:89:0f:c4:a1:33:c7:b4:40:59:76:dd:77:03:fc:
86:c8:d2:b1:61:3b:79:0a:d5:2e:65:68:f4:ca:9f:b2:f6:be:
9a:e1:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 18:52:53 2025 by rpki-client